This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.mft
File:                     8F4C8CA3FDA8BF306949F8978F69041FE55BA994.mft (raw, json)
Hash identifier:          /cbULmRlGoI4vgfovR2yjPZJBu/HhxGUbunlYyacRv4=
Subject key identifier:   53:18:A5:F8:39:A4:98:1E:78:F4:60:52:28:9E:2A:EB:3C:D8:4E:8C
Authority key identifier: 8F:4C:8C:A3:FD:A8:BF:30:69:49:F8:97:8F:69:04:1F:E5:5B:A9:94
Certificate issuer:       /CN=8F4C8CA3FDA8BF306949F8978F69041FE55BA994
Certificate serial:       725B2B2A04AA6AE875649B056232AB3134936182
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.mft
Manifest number:          20
Signing time:             Fri 05 Dec 2025 15:45:07 +0000
Manifest this update:     Fri 05 Dec 2025 15:40:07 +0000
Manifest next update:     Sat 06 Dec 2025 17:59:07 +0000
Files and hashes:         1: 3137372e38352e382e302f32322d3232203d3e20323731323633.roa (hash: 1I9m2fUf9gQilzK/92MSjbd6eOb2/M7YEGAbTr8KTYs=)
                          2: 3137372e38352e31312e302f32342d3234203d3e20323731323633.roa (hash: hUbthIaEtw9HFHw6obRsM2wDiMQWDo4OVWiLGBu5clg=)
                          3: 323830343a373863303a3a2f33322d3332203d3e20323731323633.roa (hash: tH083W2mbuvxIYkpuiCHf0maj5FH8hVwfI3NmzxecOg=)
                          4: 3137372e38352e392e302f32342d3234203d3e20323731323633.roa (hash: /0T78rqQobVja0DtJ8HTQAWJNYgm+gpT1gfJ9unfuSY=)
                          5: 3137372e38352e31302e302f32342d3234203d3e20323731323633.roa (hash: LKfai9OZTFCl04VmCLWnvJdSdPICsz5k6/PI4sSkmnA=)
                          6: 3137372e38352e382e302f32342d3234203d3e20323731323633.roa (hash: Ju72G5NPWzwFHCe9aM3r7rJQ+Ry+URdIWNHRW2JyXz0=)
                          7: 8F4C8CA3FDA8BF306949F8978F69041FE55BA994.crl (hash: 95cdHgfaoWLaTM/dvV/MBpehdbOEZvRHi65oAlFoJxw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.crl
                          rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 17:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:5b:2b:2a:04:aa:6a:e8:75:64:9b:05:62:32:ab:31:34:93:61:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F4C8CA3FDA8BF306949F8978F69041FE55BA994
        Validity
            Not Before: Dec  5 15:40:07 2025 GMT
            Not After : Dec  6 17:59:07 2025 GMT
        Subject: CN=5318A5F839A4981E78F46052289E2AEB3CD84E8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e4:4a:ea:f7:d4:09:16:3a:53:07:bf:62:15:
                    48:f4:f7:2f:54:ad:b4:42:1c:ca:6e:a2:a4:0c:83:
                    be:a9:14:66:58:1e:a6:0f:52:85:fe:48:0a:ca:4b:
                    f4:bc:14:68:88:9d:d4:2c:84:66:6b:ca:0e:46:46:
                    e2:ae:74:ad:e6:33:b9:70:18:b5:ad:12:63:ab:5a:
                    37:ac:1f:0d:f6:13:44:be:38:df:85:ba:bc:50:af:
                    d3:87:1a:52:fc:04:2a:15:2b:b9:f9:0a:8b:63:8d:
                    b7:1b:78:a5:b1:35:27:95:1e:e4:7f:12:37:63:21:
                    e4:e8:7c:59:57:ca:9a:60:6b:b0:7c:cb:b8:fb:6b:
                    75:26:d0:c7:52:af:73:25:c1:81:0d:94:5e:65:46:
                    bf:73:61:b5:c2:1a:54:7b:8e:ed:f1:f6:61:26:1d:
                    a3:06:9b:34:8d:92:13:c3:dd:bf:f3:e4:ba:d7:85:
                    b4:fb:53:d8:a1:e2:ca:05:2e:19:8f:f5:d4:b0:12:
                    9a:79:6a:e7:72:d3:ef:66:14:d9:29:b6:24:15:71:
                    7a:2d:83:24:e9:85:7d:e6:35:ed:50:ca:37:c3:fa:
                    df:49:86:82:d0:a0:3e:5c:aa:55:05:bc:10:e5:64:
                    dc:99:43:25:11:78:ca:ce:6a:cf:8d:59:51:49:d1:
                    f7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:18:A5:F8:39:A4:98:1E:78:F4:60:52:28:9E:2A:EB:3C:D8:4E:8C
            X509v3 Authority Key Identifier:
                keyid:8F:4C:8C:A3:FD:A8:BF:30:69:49:F8:97:8F:69:04:1F:E5:5B:A9:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:4c:99:15:e1:1e:14:b0:a5:54:5f:23:c5:52:b0:fd:10:e0:
         06:da:f0:43:bb:e4:30:a7:89:fa:93:63:0c:fb:c0:89:11:03:
         5f:ac:31:70:ab:39:84:4b:0a:0f:c7:61:11:19:ac:69:d5:bb:
         22:82:64:80:f4:a3:fc:84:4c:8e:37:33:97:ed:49:45:fa:e4:
         38:b2:26:aa:df:5f:f5:f4:df:31:ab:93:b8:14:d9:68:43:12:
         7f:fd:29:8e:a4:f7:d0:8b:e1:ca:10:4b:91:16:fb:f1:1f:67:
         59:fd:57:50:16:70:8c:e5:b8:de:41:b9:97:a1:4d:1f:6e:13:
         fb:84:04:88:2b:6d:64:f4:ea:22:6a:8e:c7:f4:64:06:ea:b7:
         9b:f4:f2:85:cc:fc:95:5e:63:53:47:f4:e1:51:74:d6:2d:d4:
         2a:3e:69:f0:2a:b0:75:36:4b:88:59:eb:c6:72:24:13:6e:29:
         6c:fd:49:bd:0a:ee:ef:bd:e2:db:0f:d2:3e:fa:dc:e2:6f:68:
         d9:0d:b8:ae:89:a2:27:85:b7:07:c0:1c:12:fa:45:50:b7:6f:
         e0:90:fa:39:b7:c0:7c:24:e6:50:1f:90:a4:3d:d1:32:60:29:
         1c:bc:aa:51:ea:3f:e5:37:50:c0:33:22:68:ee:97:b7:cb:ca:
         14:af:5e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:08:44 2025 by rpki-client